From 04a783d3730888e544fd762bcfaa1a2c502ee720 Mon Sep 17 00:00:00 2001
From: Jeff Sloyer <jsloyer@gmail.com>
Date: Thu, 22 Dec 2016 10:35:51 -0500
Subject: [PATCH] added subject docs on allowing all users

---
 docs/admin/authorization.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docs/admin/authorization.md b/docs/admin/authorization.md
index 523dd256d9..0387a101ed 100644
--- a/docs/admin/authorization.md
+++ b/docs/admin/authorization.md
@@ -441,6 +441,28 @@ subjects:
   name: system:serviceaccounts
 ```
 
+For all authenticated users:
+```yaml
+subjects:
+- kind: Group
+  name: system:authenticated
+```
+
+For all unauthenticated users:
+```yaml
+subjects:
+- kind: Group
+  name: system:unauthenticated
+```
+
+For all users:
+```yaml
+subjects:
+- kind: Group
+  name: system:authenticated
+- kind: Group
+  name: system:unauthenticated
+
 ## Webhook Mode
 
 When specified, mode `Webhook` causes Kubernetes to query an outside REST